Azerbaijan. Comprehensive data protection. Act

Law on Personal DataLaw of the Republic of Azerbaijan on Personal Data (No. 998-IIIQ of 11 May 2010)

In force
Partly verifiedLow confidence. DLA Piper page last reviewed 2022; recent amendments not checked. Localisation scope from prior knowledge.

§1Summary

Synopsis

Azerbaijan's personal data law regulating collection, processing and protection of personal data, with consent-based transfers and government oversight.

Key themes
  • consent
  • confidential vs open data
  • information systems registration
  • transfers
Unique features

Distinguishes 'open' and 'confidential' data; cross-border transfer generally requires written consent; localisation requirement for data processed in national information systems.

SaaS relevance

Applies where a SaaS provider processes personal data of people in Azerbaijan; transfers generally need consent.

§2Obligations

Extraterritorial
Limited
Breach notification
None
DPO
No
Cross-border transfers
Written consent unless open data; localisation for certain information systems

§3Dates

Key dates
  • Adopted
  • In force

§4Text and authority

Text
Authority
Ministry of Digital Development and Transport

§5Where it applies

Domestic law of
Azerbaijan

§6Sources and verification

Verification

Low confidence.

Partly verifiedLow confidence. DLA Piper page last reviewed 2022; recent amendments not checked. Localisation scope from prior knowledge.